CVE-2017-20038CWE-269

SICUNET Access Controller card_scan_decoder.php privileges management

Medium · published June 11, 2022

CVSS v3.1
6.3
EPSS
1%
Percentile
53.3
In the wild
Unconfirmed
What it is

A vulnerability was found in SICUNET Access Controller 0.32-05z and classified as critical. Affected by this issue is some unknown functionality of the file card_scan_decoder.php. The manipulation of the argument No/door leads to privilege escalation. The attack may be launched remotely.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00725 · 53.3th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2022-06-11T10:00Z
EPSS history
Timeline
  • 11 JUN 10:00Z
    SICUNET Access Controller card_scan_decoder.php privileges management
    cvelistv5